Aller au contenu

Vulnérabilités connues pour n/a Moodle

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2022-0334 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions Non notée 25 janv. 2022
CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions Non notée 25 janv. 2022
CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4 Non notée 25 janv. 2022
CVE-2021-40691 A session hijack risk was identified in the Shibboleth authentication plugin Non notée 21 janv. 2022
CVE-2021-40695 It was possible for a student to view their quiz grade before it had been released, using a quiz web service Non notée 21 janv. 2022
CVE-2021-40692 Insufficient capability checks made it possible for teachers to download users outside of their courses Non notée 21 janv. 2022
CVE-2021-40693 An authentication bypass risk was identified in the external database authentication functionality, due to a type… Non notée 21 janv. 2022
CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP… Non notée 21 janv. 2022
CVE-2021-43560 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Non notée 22 nov. 2021
CVE-2021-43559 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Non notée 22 nov. 2021
CVE-2021-43558 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Non notée 22 nov. 2021
CVE-2021-3943 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Non notée 22 nov. 2021
CVE-2021-21809 A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10 8.2 Élevée 23 juin 2021
CVE-2019-14827 A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive… Non notée 17 mai 2021
CVE-2019-14831 A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where… Non notée 19 mars 2021
CVE-2019-14830 A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the… Non notée 19 mars 2021
CVE-2019-14829 A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported… Non notée 19 mars 2021
CVE-2019-14828 A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions,… Non notée 19 mars 2021
CVE-2021-20283 The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had… Non notée 15 mars 2021
CVE-2021-20282 When creating a user account, it was possible to verify the account without having access to the verification email… Non notée 15 mars 2021
CVE-2021-20281 It was possible for some users without permission to view other users' full names to do so via the online users block in… Non notée 15 mars 2021
CVE-2021-20280 Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before… Non notée 15 mars 2021
CVE-2021-20279 The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2,… Non notée 15 mars 2021
CVE-2021-20185 It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit… Non notée 28 janv. 2021
CVE-2021-20184 It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade… Non notée 28 janv. 2021

Autres produits n/a